SAST Security Engineer - Checkmarx Triage & Tuning Remote

BairesDev; Distrito Capital; Presencial; VES 69.552.000 - 100.464.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

USD or local currency pay

Home office setup

Descripción de la vacante

BairesDev is seeking an experienced Application Security Engineer (Checkmarx / SAST). You will operate SAST tooling in production, triage findings, and partner with developers to remediate vulnerabilities. The role is 100% remote with flexible hours and global collaboration.

Ideal candidates have 5+ years in security or software engineering, hands-on SAST tool experience, and strong English proficiency. Competitive USD or local currency compensation is offered, with hardware provided and support

Formación

• 5+ years of experience in application security or software engineering.
• Hands-on experience operating SAST tools such as Checkmarx, Fortify, Veracode, or Coverity in production.
• Experience with source-to-sink validation and triage of security findings.
• Ability to distinguish true from false positives and document reasoning clearly.

Responsabilidades

• Run and tune SAST tooling in production environments.
• Triage individual security findings through source-to-sink validation.
• Collaborate with development teams to remediate confirmed vulnerabilities.
• Continuously improve SAST configurations to reduce noise and improve signal quality.

Conocimientos

SAST tooling

Checkmarx

Source-to-sink validation

English proficiency

Security triage

Herramientas

Checkmarx

Fortify

Veracode

Coverity

Descripción del empleo

BairesDev is seeking an experienced Application Security Engineer (Checkmarx / SAST). You will operate SAST tooling in production, triage findings, and partner with developers to remediate vulnerabilities. The role is 100% remote with flexible hours and global collaboration.

Ideal candidates have 5+ years in security or software engineering, hands-on SAST tool experience, and strong English proficiency. Competitive USD or local currency compensation is offered, with hardware provided and support